Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
File:                     uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft (raw, json)
Hash identifier:          x9hI8UbCrJCt3UdfydVZ40t8P9ssN6iqir2Su2U//wU=
Subject key identifier:   63:A8:86:D9:93:80:A2:08:90:C2:F8:3B:99:05:CB:F1:5F:5F:90:60
Authority key identifier: B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6
Certificate issuer:       /CN=b945674f01fec565971c950f3512165c43ffdfb6
Certificate serial:       018F866D005ECDEB593FAEC3949D5D6BF8A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
Manifest number:          0204
Signing time:             Fri 17 May 2024 12:00:41 +0000
Manifest this update:     Fri 17 May 2024 12:00:41 +0000
Manifest next update:     Sat 18 May 2024 12:00:41 +0000
Files and hashes:         1: drxm83SdtN0XHbeY6o6G9Jzdib4.roa (hash: Lq/4f93SKdkteLgMuRlElmD+Ija4aW/3i/0vQ4aq6C4=)
                          2: uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl (hash: oyR55ic4uXPBn7Fu31Tubm0nOnO/bFNKjMJoKAPO1tk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6d:00:5e:cd:eb:59:3f:ae:c3:94:9d:5d:6b:f8:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b945674f01fec565971c950f3512165c43ffdfb6
        Validity
            Not Before: May 17 12:00:41 2024 GMT
            Not After : May 18 12:00:41 2024 GMT
        Subject: CN=63a886d99380a20890c2f83b9905cbf15f5f9060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:68:a6:43:45:15:d1:c0:5c:f1:7b:5a:3f:8a:
                    68:12:6d:2e:72:b3:30:e1:0d:2d:48:38:9b:57:bd:
                    11:35:13:e7:18:d1:00:df:f5:69:3c:93:be:4e:be:
                    44:e2:b2:f4:af:e4:88:bf:75:ba:4e:f1:df:05:27:
                    6f:e0:64:fc:b0:82:04:05:3c:46:70:1e:69:95:ad:
                    72:d0:85:2c:05:75:4d:49:1b:b8:f3:1b:f0:c9:5c:
                    ad:87:c8:d0:01:d0:0d:53:8b:62:27:5d:04:07:64:
                    98:b6:f7:40:53:9b:47:a3:5e:c4:55:40:a3:e4:68:
                    f9:73:13:f0:bf:4f:cd:e5:1a:a4:ed:b9:d4:f0:9c:
                    7b:4e:a2:8d:9a:45:e3:34:6c:6a:23:de:e2:c8:0f:
                    33:2a:88:41:57:f7:a4:90:91:b3:4b:7f:80:b4:7c:
                    95:4a:db:21:df:6e:e1:88:ac:61:5a:cc:c3:2e:fd:
                    73:83:e8:a0:6c:e1:e2:af:90:0c:83:bf:c0:5d:8d:
                    2f:46:0f:45:45:17:9e:0b:a9:69:20:2b:14:04:63:
                    cd:f8:f6:af:82:3e:5f:33:d2:71:3e:27:bf:c5:48:
                    5c:1a:38:a1:21:73:73:8a:d7:88:d6:3b:9b:14:57:
                    b2:e8:36:7f:97:bb:77:fc:b6:26:ec:79:f2:10:1b:
                    27:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A8:86:D9:93:80:A2:08:90:C2:F8:3B:99:05:CB:F1:5F:5F:90:60
            X509v3 Authority Key Identifier:
                keyid:B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f1:c5:4d:d6:03:35:79:d7:d8:1c:1a:08:f5:53:f7:42:22:
         0d:59:2d:25:73:a9:cb:35:e9:e8:a7:44:2b:93:15:10:02:b5:
         a4:f0:30:83:c2:17:d3:40:d4:71:f4:68:1e:15:3a:62:b7:1b:
         43:62:ad:2d:1e:38:30:35:f5:d6:0f:8b:8c:6b:0f:58:9d:7d:
         1c:4c:81:8e:e6:ff:0f:a3:2e:26:70:35:41:05:7d:9d:37:da:
         d4:b0:d1:94:7e:89:68:4f:a0:bc:3e:7e:2c:8c:11:62:09:94:
         a4:93:33:b9:d7:3e:61:49:24:e9:7e:6b:b4:2d:82:7d:0a:43:
         6a:e5:11:0d:d0:2a:b4:40:17:71:3c:0a:fa:e0:e6:e9:fd:19:
         de:17:4d:fe:dc:bc:66:b3:bb:7a:c7:e1:ff:58:8f:75:2b:3e:
         72:d0:5d:3e:82:f7:a6:f1:cd:c8:21:93:38:1a:df:ce:9e:38:
         0f:fa:87:42:2b:7c:7a:39:08:29:af:24:df:d6:c4:7d:d0:af:
         c7:29:a7:a6:82:a9:49:35:a4:74:a1:55:d3:ea:12:6b:4b:91:
         22:d8:21:54:bf:db:21:39:d4:1d:12:e4:a9:7f:16:5e:e2:b5:
         10:2a:4a:12:13:3e:75:db:6a:71:09:73:72:1f:db:a3:20:55:
         34:ab:c3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:16:36 2024 by rpki-client on console-fra.rpki-client.org